Dragos icon

Dragos

Interact with the Dragos OT/ICS cybersecurity platform

Vulnerability Detection Rule → Create

AI-generated

Summary

Create a new vulnerability detection rule in the Dragos platform by specifying its fields such as name, description, JSON selector to match vulnerabilities, category, and expiration date.

Inputs

  • Rule Fields — Specify attributes for the detection rule including name (string), description (string), a JSON selector object to match vulnerabilities, category (string), and optional expiration date (dateTime).
  • Options — Additional options including sortField (string) and sortDescending (boolean) to control sorting of results, if applicable.

Output shape

a single JSON object representing the created vulnerability detection rule

The operation posts the rule fields to the API endpoint and returns the created rule's details. Optional fields not provided will be omitted. The selector must be valid JSON and is parsed before sending.

Examples

Example 1: Create a rule named 'Critical Vulnerabilities' with a selector matching high severity vulnerabilities, categorized as 'Critical', expiring in 30 days.

Set Rule Fields with name='Critical Vulnerabilities', description='Matches all critical vulnerabilities', selector JSON specifying severity filter, category='Critical', and expiration date 30 days from now.

Links

Discussion